Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Fake OpenAI, SpaceX, and Anthropic Event Lures Fuel AiTM Phishing Campaigns Targeting Microsoft and Google Accounts — Detection and Hardening Guide
Introduction A coordinated social engineering campaign is using fraudulent event invitations impersonating OpenAI, SpaceX, and Anthropic to ...
Microsoft's Dynamic Permissions for AI Agents: A Defender's Guide to Detecting and Containing Rogue Agentic AI
AI Agents Are the New Insider Threat — and Microsoft Just Said the Quiet Part Out Loud Microsoft's latest guidance makes official what many ...
Defending Against Device Code Phishing: The 2026 OAuth Bypass Threat
Defending Against Device Code Phishing: The 2026 OAuth Bypass Threat Device code phishing has emerged as the fastest-growing social engineer...
Defending Against O-UNC-066: Fake Microsoft Entra Passkey Enrollment Attacks
Introduction Security Arsenal is tracking an active campaign identified by Okta as O-UNC-066, targeting organizations across multiple sector...
AI-Enabled Device Code Phishing: Detecting Automated OAuth Abuse (April 2026 Campaign)
AI-Enabled Device Code Phishing: Detecting Automated OAuth Abuse On April 6, 2026, the Microsoft Security Blog published a critical analysis...